Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/7b1205-3450-4e90-8b14-17e66c1fd3d1/1/PgzYFMnbSbXjFZ4wmWd6CrZCWxs.roa
File: PgzYFMnbSbXjFZ4wmWd6CrZCWxs.roa (raw, json)
Hash identifier: flsX8EYYjybVKjMbBEFVOgAxnWfq18xcHoVOYq7yGjo=
Subject key identifier: 3E:0C:D8:14:C9:DB:49:B5:E3:15:9E:30:99:67:7A:0A:B6:42:5B:1B
Certificate issuer: /CN=260b2bc45477c81d774daa0c28ab44b774ba0920
Certificate serial: 018751A62452BB6F7325EAFAB2FA74FFAFD9
Authority key identifier: 26:0B:2B:C4:54:77:C8:1D:77:4D:AA:0C:28:AB:44:B7:74:BA:09:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JgsrxFR3yB13TaoMKKtEt3S6CSA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/7b1205-3450-4e90-8b14-17e66c1fd3d1/1/PgzYFMnbSbXjFZ4wmWd6CrZCWxs.roa
Signing time: Wed 05 Apr 2023 13:40:55 +0000
ROA not before: Wed 05 Apr 2023 13:40:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 209372
IP address blocks: 88.214.51.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:51:a6:24:52:bb:6f:73:25:ea:fa:b2:fa:74:ff:af:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=260b2bc45477c81d774daa0c28ab44b774ba0920
Validity
Not Before: Apr 5 13:40:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3e0cd814c9db49b5e3159e3099677a0ab6425b1b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:15:fd:78:85:91:d1:ce:61:6d:6f:de:b4:bc:
6a:6c:1d:41:1c:7f:4c:97:6e:53:9f:e8:ec:15:fa:
9c:53:29:f2:2c:b6:02:05:ba:c8:ab:b7:89:59:d8:
80:c1:1f:5f:53:74:f8:00:25:6e:db:a5:59:28:69:
e6:1b:79:65:a4:1e:e9:a4:b4:b0:11:73:8b:0a:ef:
c7:b7:a0:df:04:4d:a8:90:81:b4:d2:be:12:f0:5b:
98:27:3b:3c:64:0e:89:e8:10:8c:27:9c:3d:15:f9:
6a:bf:71:c8:06:62:f0:6e:83:65:52:8e:c3:8b:25:
4d:95:91:28:5c:3b:e9:f3:20:ea:ff:ea:60:a3:25:
6b:d1:4b:6a:2c:dc:ba:14:71:45:a8:cf:10:51:88:
54:e7:2d:d7:a2:3a:e6:d9:73:17:77:f9:2b:7a:a3:
5d:e4:5d:93:58:7a:44:f1:df:73:bb:07:e0:49:20:
38:2c:7d:ef:8b:f7:3c:d0:8e:3c:2a:45:fb:c6:05:
37:9a:a0:14:4f:f8:41:5c:e2:ac:16:27:79:ae:4c:
67:c5:a0:3a:5f:a1:e4:85:61:bc:c3:96:a5:7a:57:
0d:91:d4:f7:e0:2f:07:57:13:4c:da:07:fa:e7:04:
e8:37:1a:08:e4:f8:9b:78:01:59:24:09:66:70:95:
30:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:0C:D8:14:C9:DB:49:B5:E3:15:9E:30:99:67:7A:0A:B6:42:5B:1B
X509v3 Authority Key Identifier:
keyid:26:0B:2B:C4:54:77:C8:1D:77:4D:AA:0C:28:AB:44:B7:74:BA:09:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JgsrxFR3yB13TaoMKKtEt3S6CSA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/7b1205-3450-4e90-8b14-17e66c1fd3d1/1/PgzYFMnbSbXjFZ4wmWd6CrZCWxs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/7b1205-3450-4e90-8b14-17e66c1fd3d1/1/JgsrxFR3yB13TaoMKKtEt3S6CSA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
88.214.51.0/24
Signature Algorithm: sha256WithRSAEncryption
0f:a0:b9:e4:68:62:a8:c1:5f:b6:13:61:17:71:4b:37:4d:7a:
88:6a:44:b7:0a:43:2e:e7:74:e6:9c:31:07:7d:7a:d4:01:78:
e3:27:44:3e:b3:2a:db:b0:b4:32:b5:82:5a:46:9d:eb:59:45:
3c:95:c2:3c:df:ea:4e:44:7e:3c:30:90:19:d8:b9:24:07:3d:
aa:dd:74:31:67:22:4c:5a:ed:1b:67:e8:0b:88:74:12:18:a7:
2b:6a:cc:c0:92:d6:26:d2:b0:89:11:fd:55:bb:76:ea:f8:86:
80:aa:db:f2:a9:13:40:75:a7:80:73:c5:3e:b0:03:7e:00:ca:
b9:df:d4:10:a3:f0:fe:cc:35:68:dc:b6:2c:4a:53:31:67:90:
b1:d8:b0:a7:4d:dc:bc:0d:49:aa:2d:6c:20:be:75:bb:a6:b4:
64:14:ed:46:da:b0:bc:9e:1a:d5:31:12:6a:69:93:45:aa:eb:
eb:83:b6:9c:e1:a6:74:e4:ce:3b:cc:b7:48:7d:76:7e:02:57:
82:20:19:1b:a8:e0:cc:aa:7e:3e:70:f8:11:a6:c0:ae:55:d7:
a5:3b:f6:07:2f:36:0c:97:ea:e1:ed:dd:66:e8:0c:92:36:3c:
bd:c2:5a:c3:f2:ae:90:76:76:18:e3:eb:3d:3a:3f:4d:38:16:
88:71:b5:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:26:02 2024 by rpki-client on console-fra.rpki-client.org